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(57) Abstract: An access management apparatus and method for managing or controlling access to an extranet for xSP. To overcome 
"the problems of centralized authority and authorization cache**, the present invention decentralizes the role of access management 
by using ACL cached, and synchronizes the decentralized access management roles by using an A A server. In addition, it overcomes 
*'inefiBciency of session management** by adopting authentication/authorization based on a web browser cookie, and it additionally 
includes the functions of supporting the intonet security standard, and processing a variety of security/encryption techniques and a 
user-defined access management. 
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